[oilpan] The Node hierarchy should have correct accept method chains

Source/core/dom/TemplateContentDocumentFragment.h

 /*
  * Copyright (C) 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Neither the name of Google Inc. nor the names of its
@@ skipping 20 matching lines @@
 
 namespace WebCore {
 
 class TemplateContentDocumentFragment : public DocumentFragment {
 public:
     static PassRefPtr<TemplateContentDocumentFragment> create(Handle<Document> document, const Element* host)
     {
         return adoptRef(new TemplateContentDocumentFragment(document, host));
     }
 
-    const Element* host() const { return m_host; }
+    const Element* host() const { return Handle<const Element>(m_host).raw(); }
+
+    virtual void acceptHeapVisitor(Visitor* visitor) const OVERRIDE
+    {
+        visitor->visit(m_host);
+        DocumentFragment::acceptHeapVisitor(visitor);
+    }
 
 private:
     TemplateContentDocumentFragment(Handle<Document> document, const Element* host)
         : DocumentFragment(document, CreateDocumentFragment)
         , m_host(host)
     {
     }
 
     virtual bool isTemplateContent() const OVERRIDE { return true; }
 
-    const Element* m_host;
+    Member<const Element> m_host;
 };
 
 } // namespace WebCore
 
 #endif // TemplateContentDocumentFragment_h